This policy explains what we do with your personal information when you buy from us, contact us, or simply browse. We keep it short because we do not do very much with it.
Who we are
The Medina Spice Co., Chauffeurs Cottage, Hindon Road, East Knoyle, Wiltshire SP3 6AA, United Kingdom. We are the data controller for this website. Email us at hello@medinaspice.com about anything in this policy.
What we collect, and why
When you place an order — your name, delivery and billing address, email address and phone number if you give one. We need these to take payment, pack your tins and post them to you, and to email you about your order. We keep order records for six years because HMRC requires it.
When you join the Refill Club — the same details, plus what is in your box and how often you want it. Your subscription and your card details are held by Stripe, not by us.
When you create an account — your email address and a password, so you can see your order history. You do not have to create one; you can check out as a guest.
When you use the contact form — your name, email address and your message, so we can reply. We keep these until the conversation is finished and no longer useful.
When you just browse — our site records anonymous visit statistics (pages viewed, roughly where in the world you are, what kind of device). We use this only to see which pages are worth keeping.
Who we share it with
Only the companies that make the shop work:
- Our payment providers handle your card details directly. We never see or store your full card number.
- Royal Mail, so your parcel can be addressed and delivered.
- Our website host, which stores the site and its database on our behalf.
We do not sell your data, we do not share it for advertising, and we do not send marketing email unless you have asked us to.
Cookies
The shop sets a small number of cookies that are necessary for it to work at all — remembering what is in your basket, and keeping you logged in if you have an account. It also sets an anonymous statistics cookie. None of them identify you personally to us, and none of them are used for advertising.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it — except where we are legally required to keep order records. If you have an account you can see and export most of it yourself from My account. Email hello@medinaspice.com and we will reply within a month.
If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If we change this policy we will update this page and change the date below.
Last updated: 26 July 2026.